Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: /d950hml4+HZwnwXd2PGMSu7vGhfticgMmWZOxoZGt0=
Subject key identifier: 40:46:E4:FB:44:21:CD:21:E2:78:40:1F:0B:B5:91:B9:C8:9E:B2:90
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 019D25F1F9F092DFB6D738EA7509F0421555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0EBF
Signing time: Wed 25 Mar 2026 17:01:48 +0000
Manifest this update: Wed 25 Mar 2026 17:01:48 +0000
Manifest next update: Thu 26 Mar 2026 17:01:48 +0000
Files and hashes: 1: 9JPFM2rp1AJU61yKPb3yN0I-r5g.roa (hash: mnn7ewBGXd1rxHey+dFWTpkcBAS5QbWkbze3C0d4nK8=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: 7EEuZ4htFdhPwsmY/2BEpJ+uN9BDBow0yBfl5hDLIV0=)
3: p-aRXnAuitxe8o-22Bwes1ewmqY.roa (hash: U9mseaIe8Qq3Xii4N/S+qJKQzkE3rG5+HAlIviFWvi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f9:f0:92:df:b6:d7:38:ea:75:09:f0:42:15:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: Mar 25 17:01:48 2026 GMT
Not After : Mar 26 17:01:48 2026 GMT
Subject: CN=4046e4fb4421cd21e278401f0bb591b9c89eb290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:f5:eb:68:f2:75:12:25:e5:02:bc:50:ab:
91:af:06:c6:0e:e8:dd:05:2e:32:d9:11:49:09:85:
36:e1:70:d5:dc:4a:b1:e1:37:53:13:f5:09:38:42:
b3:62:65:25:1c:82:79:6a:18:c0:a0:a5:ca:f3:ab:
04:05:f3:88:e4:2d:bf:97:51:cb:23:ed:91:48:15:
b9:30:bf:11:50:7a:ac:45:5a:9e:3f:fe:7f:17:b6:
86:75:89:cd:fc:a6:c7:7e:27:85:50:cb:ab:9c:92:
9c:a9:c1:66:b4:28:b8:74:10:45:1e:f9:9b:1a:5b:
7c:8c:5c:fb:70:01:27:1c:12:b6:ae:e8:6c:43:bd:
dc:7b:e0:c4:3c:7c:d6:34:f8:77:bb:12:b7:aa:7b:
db:fd:a0:f7:88:6a:1c:b7:80:6f:25:23:34:41:7a:
77:0e:bb:a7:1d:b1:ec:9e:cb:16:84:d5:2b:9d:95:
0d:91:e5:82:b5:80:e2:7b:b0:56:74:08:3a:9d:f3:
43:55:c6:0b:e8:6d:fd:58:49:93:6f:e6:8a:b0:da:
d2:20:8e:f1:f8:fd:21:01:b3:35:de:2c:dc:e1:4c:
83:15:f0:c0:6c:08:30:a3:07:5a:03:d9:a8:2a:ec:
7c:86:21:6a:f0:be:75:0e:f4:12:dc:8e:a8:c7:8d:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:46:E4:FB:44:21:CD:21:E2:78:40:1F:0B:B5:91:B9:C8:9E:B2:90
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:38:4c:13:96:19:7f:42:4f:fd:94:e0:18:27:a0:a9:76:fb:
5f:1b:e5:d5:a6:d7:d1:dc:df:03:c5:58:93:3d:0b:cd:10:e8:
37:8f:44:2f:61:3b:70:1d:a9:3c:5a:69:9b:59:cc:c0:32:8d:
03:51:72:9b:96:d4:f1:53:87:00:d3:37:5c:ad:d0:62:49:3f:
96:bd:f6:22:45:e5:96:a5:c9:bd:b1:f7:95:41:e4:9c:e7:42:
c6:7c:10:f6:a7:42:e9:24:8a:7b:21:56:0a:c8:52:87:77:88:
18:d8:10:84:d9:35:c1:88:58:66:b1:6e:73:32:a4:77:78:b8:
28:49:d0:1a:4c:f2:27:58:13:6b:e3:92:ff:d2:4c:aa:9b:67:
67:0a:e5:77:4c:07:51:80:dc:e2:6e:43:06:64:da:fb:a1:c9:
17:15:8e:98:2c:b7:71:a7:92:c0:00:5c:9d:1b:a2:7c:05:c3:
11:54:d3:09:66:05:64:d8:54:11:cf:43:8a:73:d5:f2:c9:b7:
9f:f0:3d:2a:50:50:41:1b:ad:e8:9d:be:32:df:90:10:70:94:
97:4f:d8:41:02:f7:1d:25:e5:4d:3e:29:15:85:82:6b:0b:e2:
aa:0b:86:78:bf:15:14:3e:cc:52:80:f1:8c:49:7e:2b:6f:36:
56:11:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:03 2026 by rpki-client